CVE-2025-8191

Name of the Vulnerable Software and Affected Versions macrozheng mall versions up to 1.0.3

Description A problematic issue exists in macrozheng mall. The vulnerability is related to cross site scripting, triggered by manipulating the configUrl argument in the file /swagger-ui/index.html of the Swagger UI component. The issue is remotely exploitable. The exploit has been publicly disclosed. The vendor deleted the associated GitHub issue and did not respond to communication regarding the disclosure.

Recommendations Versions prior to 1.0.3: At the moment, there is no information about a newer version that contains a fix for this vulnerability.